Privacy Policy

Who we are

The Physio Rooms ("we", "our", "us") is a physiotherapy practice operating from two clinics — Liverpool Street, London (inside UNTIL, 280 Bishopsgate, EC2M 4RB) and Wickham Bishops, Essex (7 Wooldridge Place, CM8 3LW). The trading entity is The Physio Rooms Limited (registered in England and Wales, Companies House number 17137898). Our data controller contact is info@thephysiorooms.co.uk.

What personal data we collect

• Contact details you provide when booking (name, email, phone)
• Medical history and relevant health information required for safe assessment and treatment
• Clinical assessment notes, range-of-motion and strength measurements, treatment plans, and progress reviews
• Payment information processed securely via our booking provider
• Website analytics — only after you accept the consent banner — via PostHog (EU region). We capture page views and clicks on call/booking buttons. We never capture form-input text, names, addresses, or any clinical detail.

How we use your data

Your personal and clinical data is used solely to provide safe physiotherapy and rehabilitation care, for legally required clinical record-keeping, and to keep you informed about your own treatment. We do not sell data, we do not share data with third parties for marketing, and we do not use any clinical material for marketing without your explicit written consent.

Data processors we use

• Cliniko — booking, clinical notes, and payments (cliniko.com). Cliniko holds your booking history and the clinical record we generate at each visit, under its UK/EU GDPR data-processing terms.
• PostHog (EU region) — anonymised website analytics for visitors who accept the consent banner. No clinical or personal data flows to PostHog.

Your rights

Under UK GDPR you have the right to access your data, correct inaccuracies, request deletion (subject to the clinical retention period below), restrict processing, and lodge a complaint with the Information Commissioner's Office. To exercise any right, contact info@thephysiorooms.co.uk.

How long we keep your data

Clinical records are retained for 8 years from the date of your last appointment, in line with HCPC Standards of Conduct, Performance and Ethics. Marketing consent can be withdrawn at any time; withdrawal takes effect within 7 working days. Website analytics data is processed by PostHog in the EU region (Frankfurt) under its EU Data Processing Addendum and retained for 7 years from collection or until you withdraw consent — whichever comes first.

Changes to this policy

This policy was last updated on 31 May 2026. Material changes will be notified to existing patients by email.